Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          IKeSXIfE+6jC2cLBWVh9Bqo8uTLkeBrJmSjR4GtMRks=
Subject key identifier:   53:10:28:73:31:6D:4D:2D:DF:66:0D:35:23:31:82:E0:46:F5:28:41
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       019F8ED9C7C35BAAC2B5A40CFAE197C3B3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 12:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 12:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 12:01:04 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: Zt+MH3N7RlWTHeXdx/7oX97suepoMLCBvXOmV8kT0gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:c7:c3:5b:aa:c2:b5:a4:0c:fa:e1:97:c3:b3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: Jul 23 12:01:04 2026 GMT
            Not After : Jul 24 12:01:04 2026 GMT
        Subject: CN=53102873316d4d2ddf660d35233182e046f52841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:68:bb:a3:7c:98:52:b9:af:be:18:cc:1f:
                    3d:84:4f:d4:3e:65:36:eb:b3:86:4b:fc:0d:09:0a:
                    40:85:37:3a:53:3a:1a:67:9d:7c:b3:1b:f2:c8:c1:
                    22:03:a9:6e:f7:16:2f:70:04:4b:60:17:e5:62:01:
                    2f:59:79:a4:e0:cc:38:da:d2:8d:24:9d:78:19:9c:
                    12:8b:88:9d:e1:4e:56:d9:97:c7:81:34:7a:03:e0:
                    7f:6c:5b:ad:1f:a8:a0:30:1a:d9:fc:4a:87:e3:b3:
                    e3:3f:8e:35:7f:3a:5f:67:cc:7b:28:d6:af:a4:c4:
                    7b:a1:11:ac:66:15:0c:1d:f6:d6:d0:67:34:c0:e3:
                    bc:56:93:eb:f8:d4:1f:b4:ea:1e:a0:0a:bc:9a:7d:
                    a1:81:f0:c3:d2:d5:e3:fe:89:36:f0:c1:de:f7:95:
                    ce:0e:b4:73:47:96:ff:f4:ca:ae:13:32:4f:42:c1:
                    00:c6:03:83:e7:55:b6:6c:7e:5c:dd:ae:2c:27:63:
                    bb:2c:ca:6e:f2:4d:97:0f:22:54:65:90:3d:0b:7d:
                    7d:f4:ef:54:1c:81:45:d3:a7:73:49:59:89:3d:5c:
                    16:a5:b1:dd:39:7b:68:7e:75:9e:16:2a:c2:4b:13:
                    67:f3:b4:2a:f2:a3:8d:55:a4:e4:d4:1c:11:1c:38:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:10:28:73:31:6D:4D:2D:DF:66:0D:35:23:31:82:E0:46:F5:28:41
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5a:14:8c:d9:e6:c4:7f:ed:bd:c4:78:da:8f:75:d5:c5:d9:
         0c:8e:ff:90:e9:e5:04:4a:92:1f:03:a5:28:47:fd:f2:b7:85:
         f3:6d:1a:0b:6b:4b:78:d4:32:bd:87:a4:48:b9:01:95:2c:3a:
         60:1e:41:ee:81:41:85:57:d5:10:76:2b:24:61:e6:61:f1:54:
         30:c9:28:06:73:79:f1:ac:63:78:0d:a7:6b:b5:95:31:24:35:
         25:c7:81:4f:15:82:2d:0b:6f:2b:84:46:97:82:fc:e3:34:7a:
         2e:53:05:eb:eb:19:93:cf:a0:d4:30:32:01:57:ee:79:a0:a4:
         a6:8d:1f:e0:09:b1:dd:6c:13:1d:d1:3b:a0:9f:5e:ba:a9:ee:
         db:7e:81:e6:85:7c:fb:b2:d6:74:2f:79:33:b9:96:73:63:50:
         6c:d5:3a:4a:7a:d5:ce:c3:0d:0d:ba:22:d0:f5:f0:8f:4f:29:
         15:d7:57:94:73:a2:fa:a5:40:3d:ec:70:e3:c5:64:2d:f2:3c:
         d8:85:70:86:f6:d5:00:ad:d8:47:61:21:dc:84:8e:84:5a:26:
         43:55:6f:14:61:cf:fd:75:33:70:13:7f:68:ba:b1:f5:a1:bf:
         fa:af:79:5f:b9:06:a4:f7:05:d3:bf:b7:65:54:3d:26:a4:c9:
         42:50:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----